Forensics Technician

Summary

OverviewThe Forensic Analyst leads, conducts, and assists in data preservation and digital investigations in complex litigation cases by leveraging knowledge of digital forensic tools, technology and protocols related to the collection and management of electronically stored information (ESI) from a wide variety of data sources. The analyst performs investigative work and data collections as part of a forensics and collections team.ResponsibilitiesWorks internally with colleagues in the planning and execution of data preservation using the most appropriate and legally defensible solutionsPerforms investigative analysis activities for a variety of digital devices, computers, storage media, servers, networks, and cloud-based services, including seizure and retention of mobile phones and handheld devices where needed.Performs data restoration and data conversion to prepare data for processing and hostingDisplays sound knowledge and expertise of common operating systems and applications and exhibits an aptitude for problem solving in a methodical manner consistent with forensic protocolsFollows Digital Forensic good practice methodologies (ISO17025 standard and ACPO Principles of Digital Evidence) in all aspects of the forensic and eDiscovery workflowAssists with and independently conducts the forensic examination of data and prepares expert reports and other expert witness documentation related to investigationsDisplays competence in oral delivery of complex technical information to non-technical clientsDisplays high degree of comfort operating in a client-facing environment and meeting the needs of clientsAbility to be responsive to internal and external communicationsHas the ability to make well-reasoned decisions “on the spot” and execute on the planQualificationsMinimum Education Requirements: Bachelor's degree in forensic computing or equivalent relevant experienceMinimum Experience Requirements: 1 to 3 years of progressively responsible experience in related rolesOther Requirements:Excellent communication skills – both written and verbalAbility to thrive in a highly collaborative team environmentAbility to work on multiple projects concurrentlyDemonstrate working knowledge and understanding of evidence managementProficient in the usage of forensic acquisition tools and working with various file formatsAbility to collect data from a wide array of ESI, including: computers, mobile devices, media storage devices, servers, networks, social media, and cloud-based services.Familiarity with rules of evidence, ACPO guidelines, ISO17025 and Chain of CustodyGood understanding of computer networking in corporate environmentsAvailability for short notice or weekend travel when necessaryPreferred AttributesEDiscovery experience with relevant forensic collection and analysis softwareCertifications in EnCase, FTK, Cellebrite, Nuix, CFE or similarSQL or scripting#J-18808-Ljbffr

Job Description

OverviewThe Forensic Analyst leads, conducts, and assists in data preservation and digital investigations in complex litigation cases by leveraging knowledge of digital forensic tools, technology and protocols related to the collection and management of electronically stored information (ESI) from a wide variety of data sources. The analyst performs investigative work and data collections as part of a forensics and collections team.ResponsibilitiesWorks internally with colleagues in the planning and execution of data preservation using the most appropriate and legally defensible solutionsPerforms investigative analysis activities for a variety of digital devices, computers, storage media, servers, networks, and cloud-based services, including seizure and retention of mobile phones and handheld devices where needed.Performs data restoration and data conversion to prepare data for processing and hostingDisplays sound knowledge and expertise of common operating systems and applications and exhibits an aptitude for problem solving in a methodical manner consistent with forensic protocolsFollows Digital Forensic good practice methodologies (ISO17025 standard and ACPO Principles of Digital Evidence) in all aspects of the forensic and eDiscovery workflowAssists with and independently conducts the forensic examination of data and prepares expert reports and other expert witness documentation related to investigationsDisplays competence in oral delivery of complex technical information to non-technical clientsDisplays high degree of comfort operating in a client-facing environment and meeting the needs of clientsAbility to be responsive to internal and external communicationsHas the ability to make well-reasoned decisions “on the spot” and execute on the planQualificationsMinimum Education Requirements: Bachelor's degree in forensic computing or equivalent relevant experienceMinimum Experience Requirements: 1 to 3 years of progressively responsible experience in related rolesOther Requirements:Excellent communication skills – both written and verbalAbility to thrive in a highly collaborative team environmentAbility to work on multiple projects concurrentlyDemonstrate working knowledge and understanding of evidence managementProficient in the usage of forensic acquisition tools and working with various file formatsAbility to collect data from a wide array of ESI, including: computers, mobile devices, media storage devices, servers, networks, social media, and cloud-based services.Familiarity with rules of evidence, ACPO guidelines, ISO17025 and Chain of CustodyGood understanding of computer networking in corporate environmentsAvailability for short notice or weekend travel when necessaryPreferred AttributesEDiscovery experience with relevant forensic collection and analysis softwareCertifications in EnCase, FTK, Cellebrite, Nuix, CFE or similarSQL or scripting#J-18808-Ljbffr